We realize that many of the function-preserving transformations that have been successfully used in evolution NAS [1]} can be used in obfuscation.
More specifically, we use layer widening, layer branching, layer deepening, layer skipping and kernel widening and dummy addition obfuscating knobs in this phase.
Note that while many of these operators have been introduced before in the context of architecture evolution [2]}, [3]}, we are the first to use them in terms of side-channel countermeasures. Layer branching is redesigned, and dummy addition knob is added for dimension obfuscation.
